[■]El radar · registro completo

Vulnerabilidades

Las que tocan alguna de las tecnologías que seguimos, con versiones afectadas, corrección y si se están explotando.

51.301expedientes con estos filtros

Filtros

Tecnología Gravedad Sólo las que se están explotando

7,2 Alta

CVE-2026-95866: cross-site scripting (XSS) en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

CVE-2026-95866

T−51d 24 sept. 2026
6,4 Media

CVE-2026-93656: cross-site scripting (XSS) en User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor

CVE-2026-93656

T−51d 24 sept. 2026
7,3 Alta

CVE-2026-93901: gestión incorrecta de privilegios en Optima Express IDX

CVE-2026-93901

T−51d 24 sept. 2026
7,2 Alta

CVE-2026-96568: cross-site scripting (XSS) en Restaurant Menu and Food Ordering

CVE-2026-96568

T−51d 24 sept. 2026
7,5 Alta

CVE-2026-89406: falta de autorización en Modula Image Gallery – Photo Grid & Video Gallery

CVE-2026-89406

T−51d 24 sept. 2026
8,1 Alta

CVE-2026-92713: falta de autorización en Modula Image Gallery – Photo Grid & Video Gallery

CVE-2026-92713

T−51d 24 sept. 2026
7,2 Alta

CVE-2026-84280: cross-site scripting (XSS) en Fancy Product Designer

CVE-2026-84280

T−51d 24 sept. 2026
8,8 Alta

CVE-2026-89426: gestión incorrecta de privilegios en Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more

CVE-2026-89426

T−51d 24 sept. 2026
6,1 Media

CVE-2026-92212: cross-site scripting (XSS) en JetFormBuilder — Dynamic Blocks Form Builder

CVE-2026-92212

T−51d 24 sept. 2026
7,2 Alta

CVE-2026-93303: cross-site scripting (XSS) en HT Contact Form – Drag & Drop Form Builder for WordPress

CVE-2026-93303

T−51d 24 sept. 2026
6,4 Media

CVE-2026-92746: cross-site scripting (XSS) en Gutenverse – WordPress Blocks, Page Builder & Site Editor

CVE-2026-92746

T−51d 24 sept. 2026
6,4 Media

CVE-2026-96766: cross-site scripting (XSS) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

CVE-2026-96766

T−51d 24 sept. 2026
— Alta

CVE-2026-63498: cross-site scripting (XSS) en snipe/snipe-it

CVE-2026-63498 · GHSA-396X-XMVH-P563

T−51d 24 sept. 2026
— Alta

CVE-2026-62368: cross-site scripting (XSS) en snipe/snipe-it

CVE-2026-62368 · GHSA-P9H3-GVPQ-5539

T−51d 24 sept. 2026
6,4 Media

CVE-2026-93897: cross-site scripting (XSS) en GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

CVE-2026-93897

T−51d 24 sept. 2026
7,2 Alta

CVE-2026-84281: cross-site scripting (XSS) en Fancy Product Designer

CVE-2026-84281

T−51d 24 sept. 2026
4,3 Media

CVE-2026-19775: falta de autorización en OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA

CVE-2026-19775

T−51d 24 sept. 2026
9,1 Crít.

CVE-2026-89055: falta de autorización en Customer Reviews for WooCommerce

CVE-2026-89055

T−51d 24 sept. 2026
6,4 Media

CVE-2026-94376: cross-site scripting (XSS) en Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots

CVE-2026-94376

T−51d 24 sept. 2026
6,5 Media

CVE-2026-93899: inyección SQL en Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots

CVE-2026-93899

T−51d 24 sept. 2026
9,1 Crít.

CVE-2026-93399: acceso a datos de otros usuarios (IDOR) en Online Scheduling and Appointment Booking System – Bookly

CVE-2026-93399

T−51d 24 sept. 2026
5,3 Media

CVE-2026-92799: vulnerabilidad en Online Scheduling and Appointment Booking System – Bookly

CVE-2026-92799

T−51d 24 sept. 2026
4,3 Media

CVE-2026-92829: falta de autorización en Blog2Social: Social Media Auto Post & Scheduler

CVE-2026-92829

T−51d 24 sept. 2026
7,2 Alta

CVE-2026-96039: cross-site scripting (XSS) en BA Book Everything

CVE-2026-96039

T−51d 24 sept. 2026
9,8 Crít.

CVE-2026-14281: gestión incorrecta de privilegios en Wawp Country Code & Chat Widget for WooCommerce

CVE-2026-14281

T−51d 24 sept. 2026
7,2 Alta

CVE-2026-83591: cross-site scripting (XSS) en AMP for WP – Accelerated Mobile Pages

CVE-2026-83591

T−51d 24 sept. 2026
— Alta

CVE-2026-63493: vulnerabilidad en snipe/snipe-it

CVE-2026-63493 · GHSA-HXCX-9H4F-42XX

T−51d 24 sept. 2026
6,4 Media

CVE-2025-14814: cross-site scripting (XSS) en CSS & JavaScript Toolbox

CVE-2025-14814

T−51d 24 sept. 2026
— Media

CVE-2026-62998: validación de entrada incorrecta en redaxo/source

CVE-2026-62998 · GHSA-4F5F-J737-PM58

T−52d 24 sept. 2026
9,8 Crít.

CVE-2026-12227: inclusión de ficheros en PHP en Visual Composer Website Builder

CVE-2026-12227

T−52d 24 sept. 2026